How can I use raw SQL with Flask-SQLAlchemy?

How can I use raw SQL with Flask-SQLAlchemy?

You can execute raw SQL queries using the db.session.execute() method in Flask-SQLAlchemy.

Can you show me an example of executing a raw SQL query?

Sure! Here's a simple example:

result = db.session.execute('SELECT * FROM users')
for row in result:
    print(row)

What about inserting data using raw SQL?

You can insert data like this:

db.session.execute('INSERT INTO users (name, age) VALUES (:name, :age)', {'name': 'John', 'age': 30})
db.session.commit()

Are there any risks with using raw SQL?

Yes, using raw SQL can expose your application to SQL injection attacks if not handled properly. Always use parameterized queries.